# CF Hero

> Find real origin IP addresses of Cloudflare protected web apps

- Canonical URL: https://www.fosshunter.com/tools/cf-hero
- JSON export: https://www.fosshunter.com/tools/cf-hero.json
- Website: https://github.com/musana/CF-Hero
- Category: Cybersecurity
- Open source: yes
- Self-hostable: yes
- Verified listing: no
- Featured: no
- Published at: 2026-05-24T16:45:57+00:00
- Catalog revision: `2626384002`

## Repository metrics (point-in-time)

- Repository: https://github.com/musana/CF-Hero
- Stars: 2650
- Forks: 254
- Open issues: 6
- License: unknown
- Last push: 2026-06-26T05:43:09+00:00
- Metrics observed at (synced_at): 2026-11-05T15:01:28+00:00
- Archived: no

Tags: CyberSecurity, Reconnaissance, Open Source, CloudFlare
Tech stacks: censys, go, golang, shodan

## Features
- Gathers intelligence from ZoomEye, Censys, Shodan, and SecurityTrails. *(highlighted)*
- Analyzes historical DNS records and performs active DNS enumeration. *(highlighted)*
- Validates findings via response analysis to minimize false positives. *(highlighted)*

## Description

CF Hero is a reconnaissance tool that uses multiple data sources and historical DNS records to discover the real origin IP addresses of web applications protected by Cloudflare.

---
Source: [FOSSHunter — CF Hero](https://www.fosshunter.com/tools/cf-hero) — cite `synced_at` and the catalog revision when quoting metrics.
Interpretation rules: https://www.fosshunter.com/llms-full.txt